Internet Archive's in-browser audio with external links "theater" requires JavaScript to be enabled. It appears your browser does not have it turned on. Please see your browser settings for this feature.

hpr3144 :: Pentesting: Insecure Object Reference

by: Cedric De Vroey

Publication date: 2020-08-20

Usage: http://creativecommons.org/licenses/by-sa/3.0

Topics: pentesting, security, hacking

Contributor: HackerPublicRadio

Language: English

Summary: How an insecure object reference lead to a covid-related databreach
Series: Privacy and Security
Source: http://hackerpublicradio.org/eps.php?id=3144
Original audio: http://archive.org/download/hpr3144/hpr3144_source.ogg

Insecure object reference is a very common bug in online applications which most of the time leads to significant data breaches. In this episode I talk about one such vulnerability I discovered recently in a covid-related application.